GHSA-7wwx-xj66-r44xPublished
Panic when validating certificates with DSA public keys in crypto/x509
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-58188 · Microsoft / collected KEV context
cve-program · CVE-2025-58188
- https://go.dev/cl/709853
- https://go.dev/issue/75675
- https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
- https://pkg.go.dev/vuln/GO-2025-4013
euvd · EUVD-2025-36732
- https://go.dev/cl/709853
- https://go.dev/issue/75675
- https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
- https://pkg.go.dev/vuln/GO-2025-4013
nvd · CVE-2025-58188
- https://go.dev/cl/709853
- https://go.dev/issue/75675
- https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
- https://pkg.go.dev/vuln/GO-2025-4013
- http://www.openwall.com/lists/oss-security/2025/10/08/1
osv · GO-2025-4013
Related operational evidence
Explicit CVE identifiers- Release 2026-02-08 · Tool release · 17 Feb 2026
- Release 2026-01-04 · Tool release · 9 Jan 2026